Microsoft Entra ID

• Create application

  Create a Microsoft Entra application registration with allowlisted platform, role, and API permission settings, without creating or accepting password or key credentials.

• Create app role assignment

  Assign an application role to a user, group, or client service principal.

• Create group

  Create a Microsoft 365, assigned security, or dynamic-membership group.

• Create role assignment

  Grant a user, role-assignable group, or service principal a Microsoft Entra directory role, conferring the role's administrative access at the explicit tenant, administrative-unit…

• Create service principal

  Create an enterprise application (service principal) for an existing application ID without accepting or creating password or key credentials.

• Create user

  Create a Microsoft Entra tenant user with the required sign-in profile and an initial password.

• Delete administrative unit

  Delete a Microsoft Entra administrative unit and remove its administrative scope.

• Delete application

  Delete a Microsoft Entra application registration by its directory Object ID.

• Delete group

  Delete a Microsoft Entra group and its associated group resources.

• Delete service principal

  Delete a Microsoft Entra enterprise application/service principal.

• Delete user

  Delete a tenant user and remove the directory identity.

• Disable user

  Disable a Microsoft Entra user without deleting the directory object.

• Get administrative unit

  Get one Microsoft Entra administrative unit by directory object ID.

• Get application

  Get one application registration by its directory Object ID, not its Application (client) ID, returning only credential-safe properties.

• Get conditional access policy

  Get one Microsoft Entra Conditional Access policy by object ID.

• Get device

  Get one Microsoft Entra device by its directory Object ID, not its distinct Device Registration Service deviceId value.

• Get directory audit

  Get one Microsoft Entra directory audit event by its event ID.

• Get directory role

  Get one Microsoft Entra directory role that is activated in the tenant by its activated role object ID.

• Get domain

  Get one tenant domain by its fully qualified domain name.

• Get group

  Get one tenant group by directory object ID.

• Get organization

  Get the connected Microsoft Entra tenant's organization record by tenant organization ID.

• Get role assignment

  Get one unified Microsoft Entra directory role assignment by its assignment ID, including its principal, role definition, and directory or application scope identifiers.

• Get service principal

  Get one Microsoft Entra enterprise application/service principal by its directory Object ID, not its Application (client) ID, returning only credential-safe properties.

• Get sign in

  Get one retained Microsoft Entra sign-in event by event ID.

• Get subscribed sku

  Get one commercial product subscription acquired by the Microsoft Entra tenant using its subscribed-SKU object ID.

• Get user

  Get one tenant user by directory object ID or user principal name.

• Get user manager

  Get the directory object recorded as a user's manager.

• List administrative unit members

  List users, groups, and devices directly assigned to a Microsoft Entra administrative unit.

• List administrative units

  List Microsoft Entra administrative units with optional OData filtering, search, field selection, relationship expansion, and cursor pagination.

• List administrative unit scoped role members

  List the legacy scoped-role memberships that grant users administrative access within one Microsoft Entra administrative unit.

• List application owners

  List the users and service principals that own an application registration.

• List applications

  List Microsoft Entra application registrations with OData filtering, search, ordering, and cursor pagination.

• List app role assignments

  List users, groups, and client service principals granted application roles on a resource service principal, with OData filtering, field selection, and cursor pagination.

• List conditional access policies

  List read-only Microsoft Entra Conditional Access policy definitions, including conditions, grant controls, and session controls, with OData queries and cursor pagination.

• List devices

  List devices registered in the Microsoft Entra tenant with optional advanced OData queries and cursor pagination.

• List directory audits

  List retained Microsoft Entra directory audit events with documented OData filtering, activity-time ordering, and opaque cursor pagination.

• List directory role members

  List principals currently assigned to one activated Microsoft Entra directory role.

• List directory roles

  List Microsoft Entra directory roles that are activated in the tenant.

• List domains

  List verified and unverified domains configured for the Microsoft Entra tenant, with documented OData query controls and cursor pagination.

• List group members

  List a group's direct members; transitive members are not included.

• List group owners

  List the users and service principals that own a group.

• List groups

  List tenant groups with general OData options, or list only dynamic-membership groups with a fixed safe filter and membership-rule fields.

• List organizations

  Return the connected Microsoft Entra tenant's organization record.

• List role assignments

  List unified Microsoft Entra directory role assignments, including the assigned principal, role definition, and directory or application scope.

• List service principal owners

  List directory objects that own an enterprise application/service principal.

• List service principals

  List Microsoft Entra enterprise applications and service principals with OData filtering, search, ordering, and cursor pagination.

• List sign ins

  List retained Microsoft Entra sign-in events, newest first.

• List subscribed skus

  List commercial product subscriptions acquired by the Microsoft Entra tenant, including assigned-license counts, prepaid-unit availability, and included service plans.

• List user direct reports

  List directory objects that directly report to one user, with optional OData filtering, search, ordering, field selection, and safe cursor pagination.

• List user license details

  List one tenant user's assigned product licenses and the provisioning state of their included service plans.

• List user memberships

  List groups, directory roles, and administrative units a user directly belongs to.

• List users

  List tenant users with optional OData filtering, search, ordering, field selection, and a safe continuation cursor.

And 13 more in Definable.